Senior Digital Forensic Investigator | Incident Response

att; Charlotte (NC); On-site; USD 128,000 - 193,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Paid Time Off and Holidays

Tuition reimbursement

Paid Parental Leave

Employee discounts

Job summary

AT&T is seeking a Senior Cybersecurity Digital Forensic Investigator to lead investigations across enterprise environments. You will analyze digital evidence, reconstruct timelines, and produce defensible reports while collaborating with Incident Response, Threat Intelligence, Malware Analysis, and platform teams.

The role covers on-call rotations and investigations across endpoints, cloud, identity platforms, networks, and applications, with a strong emphasis on modern threat tradecraft and

Qualifications

• 3+ years in Digital Forensics, Incident Response, or related cybersecurity discipline.
• Bachelor’s degree in Computer Science or Cybersecurity, certification preferred.
• Experience with Windows/Linux/macOS environments and cloud platforms.

Responsibilities

• Conduct digital forensic investigations for cybersecurity incidents.
• Preserve evidence, determine scope, and report findings.
• Collaborate with IR, Threat Intelligence, Malware Analysis, and platform teams.
• Lead investigations and produce technical reports for diverse audiences.
• Participate in on-call rotations and support on-premises, cloud, and hybrid environments.
• Identify gaps and help improve forensic processes and tooling.

Skills

Digital Forensics

Incident Response

Threat Hunting

Security Operations

Forensic Reporting

Communication

Education

Bachelor's degree in CS/related

Tools

Windows

Linux

Cloud Platforms

SIEM

EDR/Forensics tools

Job description

AT&T is seeking a Senior Cybersecurity Digital Forensic Investigator to lead investigations across enterprise environments. You will analyze digital evidence, reconstruct timelines, and produce defensible reports while collaborating with Incident Response, Threat Intelligence, Malware Analysis, and platform teams.

The role covers on-call rotations and investigations across endpoints, cloud, identity platforms, networks, and applications, with a strong emphasis on modern threat tradecraft and